On Monday, October 31, 2016 at 5:07:06 PM UTC-7, nessun...@gmail.com wrote: > I see that Google's response (and Apple's) is harsher than Mozilla, by > caterogically distrusts WoSign and StartCom without granting the option, as > Mozilla does, to resubmit a new CA application after a set period of time > through which they work to correct their flawed procedures.
(Wearing a Google hat) Though omitted from the post, which focused on impact and options for users and site operators, it's not correct to conclude that it's impossible to re-establish trust. _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
